General

  • Target
    78d449904f1a8a3000a3ba549dba764e.exe
  • Size 614KB
  • Sample231024-g68ahsbb71
  • SHA256 eb2c77eb03b17cdb76301d30bf4b07d97f3d0a742d198cf84a191c8271a42b4a
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • o5pf

Decoy
  • readyupgraphics.com

  • linkduren77.xyz

  • aeronoms.com

  • dingyaping.com

  • 813tv.net

  • emerge-marketing.com

  • janvori.online

  • sublimardr.com

  • jaggerglass.autos

  • mp3juices.work

  • alexandrasfinejewelery.com

  • tepatoken.com

  • snugglewash.com

  • hmoney.net

  • whatpowerplug.com

  • baassource.online

  • piscogastrolounge.com

  • shower-installation-15244.bond

  • zxhzgroup.com

  • vcxz800.website

Targets

    • Target
      78d449904f1a8a3000a3ba549dba764e.exe
    • Size 614KB
    • SHA256 eb2c77eb03b17cdb76301d30bf4b07d97f3d0a742d198cf84a191c8271a42b4a
    • MD5 SHA1 SHA512 SSDEEP
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks